Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-09 · source-backed
A newly catalogued vulnerability lets remote attackers run arbitrary commands by smuggling instructions into content the agent processes. It landed inside a wider June MCP security wave where nine separate CVEs traced back to broken OAuth flows. If you run Windsurf or Devin Desktop agents, update now and treat all untrusted file and web content as an injection vector, not a convenience.
Each link below shares sources, entities, or timing with this story.
MCP uses OAuth / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (MCP uses OAuth); both cover CVEs, RCE, Windsurf; overlapping topics (cves, file, windsurf).
Cursor benchmarked against Windsurf / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor benchmarked against Windsurf); both cover CVE, CVEs, RCE, Windsurf; overlapping topics (agent, cves).
OX Security criticizes Windsurf / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (OX Security criticizes Windsurf); both cover CVE, CVEs, Windsurf; overlapping topics (cves, windsurf).
MCP uses OAuth / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (MCP uses OAuth); both cover CVE, CVEs, RCE; overlapping topics (agent, cves).
MCP uses OAuth / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (MCP uses OAuth); both cover CVE, CVEs; reported by the same outlet (adversa.ai).
Claude Code uses OAuth / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses OAuth); both cover Devin Desktop, Windsurf; overlapping topics (agent, desktop, devin, windsurf).
MCP uses OAuth / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (MCP uses OAuth); both cover RCE, Windsurf; overlapping topics (agent, attacker, file, windsurf).
Claude Code uses OAuth / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses OAuth); both cover Devin Desktop, Windsurf; overlapping topics (agent, desktop, devin, windsurf).